Add cluster-cidr to kube-proxy config

This option enables masquerading for traffic directed at pods
that comes frmom outside the cluster.

roles/kubernetes/node/templates/manifests/kube-proxy.manifest.j2

@@ -17,6 +17,7 @@ spec:
     - --kubeconfig=/etc/kubernetes/node-kubeconfig.yaml
 {% endif %}
     - --bind-address={{ ip | default(ansible_default_ipv4.address) }}
+    - --cluster-cidr={{ kube_pods_subnet }}
     - --proxy-mode={{ kube_proxy_mode }}
 {% if kube_proxy_masquerade_all and kube_proxy_mode == "iptables" %}
     - --masquerade-all